Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NxVJE51C-OLttHnhtqcqevntuic.roa
File:                     NxVJE51C-OLttHnhtqcqevntuic.roa (raw, json)
Hash identifier:          6OMOXl/NGXOxPsDkHNex/1EwXEMa3TNQopHmVB/fYj4=
Subject key identifier:   37:15:49:13:9D:42:F8:E2:ED:B4:79:E1:B6:A7:2A:7A:F9:ED:BA:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0643
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NxVJE51C-OLttHnhtqcqevntuic.roa
Signing time:             Sun 01 Mar 2026 02:30:50 +0000
ROA not before:           Sun 01 Mar 2026 02:30:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=371549139D42F8E2EDB479E1B6A72A7AF9EDBA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:07:8f:36:78:36:13:1f:7d:ad:08:0d:92:
                    32:e7:f9:40:6e:a5:5c:2e:e0:4b:bb:9f:f3:af:1d:
                    23:b7:97:ef:ea:84:f7:56:06:99:d3:89:9a:ae:64:
                    5a:c3:ce:c7:da:36:be:85:a2:04:08:ac:1e:4a:91:
                    76:61:38:6e:f1:54:d3:d0:c3:4a:fc:0d:a0:d1:c0:
                    34:2a:2c:ad:71:72:fd:4f:f7:0e:68:e3:38:b9:65:
                    18:36:d0:4e:29:6a:34:d2:d6:b1:a9:13:bd:e4:92:
                    81:c0:52:90:c3:45:51:e2:0e:99:cd:24:1a:0c:1f:
                    cd:85:90:4a:8b:12:f1:d7:f7:e1:c1:87:0e:68:c2:
                    b5:e1:73:29:f7:6a:74:74:f4:b8:c1:a6:9d:b4:14:
                    a2:38:64:7f:6c:1f:0e:c7:6e:a5:d2:45:90:05:36:
                    26:94:7d:fb:f2:b8:76:8d:b4:65:e7:cd:8d:04:57:
                    a9:28:05:38:9f:ac:43:45:74:70:c9:3e:c8:24:e8:
                    4e:d2:a0:ca:52:fe:de:11:8e:aa:33:ce:09:bb:0c:
                    93:ab:ed:7e:1f:91:03:88:a8:3a:9a:5c:32:1b:f3:
                    87:de:97:81:19:81:9b:1a:ec:af:78:03:29:1c:92:
                    d2:62:d7:83:2e:fb:27:a6:2b:02:a3:85:ae:40:8b:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:49:13:9D:42:F8:E2:ED:B4:79:E1:B6:A7:2A:7A:F9:ED:BA:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NxVJE51C-OLttHnhtqcqevntuic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:92:9a:37:5b:db:8d:c5:f8:a5:77:b8:81:bf:bb:ce:19:
         16:0d:ac:e3:4c:e9:1b:e9:82:58:b7:91:36:38:81:e8:55:6d:
         e0:9c:66:2d:9a:7c:89:8c:11:11:31:48:b6:26:07:4b:04:cc:
         ce:52:b6:16:74:c7:09:fa:bb:98:a5:8e:bd:8d:5f:57:c5:ee:
         d3:39:1b:f3:50:a2:6a:6d:95:2b:92:1a:f1:5d:5a:fe:b5:48:
         53:7e:26:1b:e0:b8:37:68:f3:a2:d8:f5:62:65:82:19:1f:bb:
         d7:7e:8d:75:30:86:22:26:01:d7:d3:82:46:bd:65:e3:f5:5e:
         3b:7b:63:37:6f:55:4e:40:10:af:fe:01:26:34:91:fa:c7:5c:
         5c:ff:b8:73:78:2b:12:f5:83:ff:c3:b6:ee:bb:e2:ff:c0:da:
         22:14:77:c1:ca:53:62:63:e4:37:88:82:60:7d:37:cf:50:c9:
         da:3b:12:4c:6a:7b:2e:33:88:ec:23:e5:6d:b5:27:b0:6c:96:
         d7:ca:0e:aa:f7:a8:c0:73:ab:47:17:63:eb:10:1b:a1:bc:0a:
         2d:3f:c7:5f:32:39:61:dd:38:78:cd:19:12:7b:92:67:46:90:
         30:16:c7:10:ee:44:24:e7:17:f1:e8:10:04:1c:36:fc:df:31:
         64:d7:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:07 2026 by rpki-client